O harris interactive 


August 2018 


Information Rights Strategic Plan: 
Trust and Confidence 


Information Commissioner's Office 


Prepared for: 


Information Commissioner’s Office 


Harris Interactive Contacts: 


Michael Worledge Mike Bamford 

Head of Financial Services Research Manager 

Tel: +44 (0)161 242 1368 Telephone: +44 (0) 161 242 1370 

Email: mworledge@harrisinteractive.co.uk Email: mbamford@harrisinteractive.co.uk 


©2018, Harris Interactive All rights reserved 


Information Commissioner’s Office 
Information Rights Strategic Plan: Trust and Confidence 


Table of Contents 


As Background Pest TR M TERM 3 
A Backetouo onu d Cast im ditus eM AMD SML DIM MD E IL M o a ecu 3 
B. Alms & Objectives eec aud esee poi div dud Reda Fu dba CE poisse sasise orup oeni nisde s dE RR dA ME 3 
B.1 Overall Objectivè E r——— 3 

C. Executive SUMIMANY sisi ices ceseedcccssccccscccsecceceaccctssevccaesconeeecoseececssdeecusessusdsacsssntuscerssssseoerse 4 
D. Methodology and Response Rates .................... eee eese eese eene eene enne nnn nennen nnne nnns nnn 6 
D.1 Quotas and weighting ...........c.ccccccccessssssecececececseseaeeeseeeeseesseaseeeeeesesseesesasaeseeeesesesesseaeas 6 
Di2 REDOING mr ———— niaii 6 

E. Research Findings ucisini pu cesis ioter pe FU qu dE e pa EP OUNEUR UOdEELORRES QR UON A DU DUERME CE EE 7 
E1 Trust S CODD BEI B aci decoes iud vm ome Dav iu p uMc ocu Eo RE E a TU tuU REESE 7 
E2 GDPR ———— —— ——————— ——— QS 16 
ES XIIe dl nToj[op:u o E 20 
E.4 Freedom of Information (FOI)... nennen nnne nennen nnn nns 22 

2 


©2018, Harris Interactive All rights reserved 


Information Commissioner’s Office 
Information Rights Strategic Plan: Trust and Confidence 


A. Background 


A.1 Background 


Goal #4 of the Information Commissioner’s Office (ICO) Information Rights Strategic Plan 2017-21 is 
‘to increase the public’s trust and confidence in how data is used and made available’. It is therefore 
important for the ICO to gauge the public’s changing perceptions in this area. 


Since the Trust and Confidence research was last undertaken, GDPR has come into effect, and the ICO 
has also published its Technology Strategy 2018-21 in support of the Information Rights Strategic Plan. 
There is therefore also a need to provide benchmarks in these areas. 


B. Aims & Objectives 


B.1 Overall Objective 
The main aim of this research is: 
“To gauge public perceptions and awareness on how data is shared with and used within 
organisations and to monitor any change in the trust and confidence in how data is used and made 
available.” 


Other objectives of this research are to: 


1) Understand awareness and perceptions of the General Data Protection Regulation and how 
it affects their personal data. 

2) Explore the public's perceptions around technology in relation to the personal data that 
companies hold on individuals. 


3) Investigate individuals' knowledge around the Freedom of Information Act. 
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C. Executive Summary 


Trust and Confidence 


GDPR 


The proportion of people who trust businesses with their personal data has risen slightly 
since 2017. 


Furthermore, the proportion of the public with high trust and confidence in companies 
storing and using personal data has increased significantly. However, the proportion with 
low trust and confidence remains greater. 


People are most likely to have trust and confidence in public bodies than private bodies 
storing and using their personal data. 


Of the types of organisations asked about, levels of trust and confidence are lowest towards 
social messaging platforms. 


Levels of good understanding of how personal data is used and made available to third parties 
and the public by companies and organisations has almost doubled, yet remain low overall. 


The proportion of people stating that they or a close friend/family member have heard 
about a data breach has risen slightly. 


Partly due to a decrease in the proportion of people stating ‘don’t know’, a majority of the 
public now disagrees that: 
O It is easy to access and change my personal information held by 
businesses/organisations 
O Current laws and regulations provide sufficient protection of personal information 
O Businesses/organisations are open and transparent about how they collect and use 
personal information 
O |t is easy to find out how my personal information is stored and used by 
businesses/organisations 
o Itis easy to find out whether my personal information is being made available to third 
parties. 


A majority of the public feels it is important that their personal data/ information is 
protected when they share it. 


A large majority of the public is aware of the GDPR, but there is more work to be done to reach 
the levels of awareness that the Data Protection Act had achieved previously. 
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e Awareness of the GDPR rights varies considerably. 


e There has been a shift towards public bodies being where the public claim they would seek 
information from. The ICO has seen a significant rise, with Citizen’s Advice Bureau and Local 
MP seeing slight rises. 


Technology 


e The public is divided on whether companies and organisations protect their personal 
information from the risks arising from technology. 


e The public’s biggest concern when companies and organisations use their personal 
information is ‘personal information being stolen by criminals’. 


FOI 
e Although agreement that information about Government, public authorities and/or publicly 


owned companies is available and accessible is stable from 2016, there has been a decrease 
in awareness of the public’s rights. 
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D. Methodology and Response Rates 


D.1 Quotas and weighting 


Harris Interactive, an independent market research agency, interviewed 2,131 adults online aged 
18+ between 23" July and 25" July 2018. 


Table 1. Number of interviews achieved by gender 


Male | 1013 | 48% 
|, Female 1118 | 5296 
| TOTAL | 2131 | 100% | 
Table 2. Number of interviews achieved by age 
Count 926 
18-24 245 | 11% 
25-34 | 392 | 18% 
35-44 358 | 17% 
45-54 368 17% 
55-64 | 340 | 16% 
65+ 428 20% 
| TOTAL | 2131 | 100% 
Table 3. Number of interviews achieved by region 
Count % 
England | 1749 | 82% 
Scotland | 173 | 8% 
Wales | 107 | 5% 
Northern Ireland | 102 | 5% 
| TOTAL | 2131 | 100% 


D.2 Reporting 
The data has been weighted to be nationally representative by age, gender and region. 


Where relevant, comparisons have been made to previous surveys from 2016 and 2017. 


o 
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E. Research Findings 


E.1 Trust & Confidence 


The public continues to be split on the trust and confidence it has in companies and organisations 
storing and using their personal information. However, the percentage of people with high levels of 
trust and confidence has increased since 2017. 


e One in three (34%) people have high trust and confidence (rating 4-5 out of 5) in companies 
and organisations storing and using their personal information, which is significantly up from 
the 21% stating this in 2017. 

e Also, the proportion stating ‘none at all’ has dropped, from 14% to 9%. 


Q1. How much trust and confidence do you have in companies and organisations storing and using 
your personal information? 


2017 2018 


NET: Low trust and confidence 38% 37% 
1 - None at all 1496 996 

2 2496 2896 
3 4196 3096 
4 1796 2896 
5 — A great deal 496 696 

NET: High Trust and Confidence 2196 3496 


Base: All Adults: 2017 (2049) / 2018 (2131) 
e Males (3796) are more likely to have high trust and confidence in companies and 


organisations storing and using their personal information than females (30%). 


e Trust and confidence in companies and organisations storing and using personal information 
is significantly higher amongst 18-34 year olds (49%) than 35-54 (3196) and 55+ year olds 
(25%). 
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As in 2017, people are significantly more likely to have high trust and confidence (rating 4-5 out of 5) 
in the NHS, Police and national governmental bodies than in private companies. 


e Nearly two in three (65%) people say they have high trust and confidence in the NHS/their 
local GP storing and using their personal information, up 5% points from 2017. 

e Only one in seven (15%) people state they have high trust and confidence in social messaging 
platforms storing and using their personal information, similar to the 12% reported in 2017. 

e The biggest gain in high trust and confidence since 2017 was seen for financial services 
providers (this has seen a 7% increase to 46% between 2017 to 2018). 


Q2. How much trust and confidence do you have in the following companies and organisations 
storing and using your personal information? 


2017 2018 
NET LOW NET HIGH NETLOW | NETHIGH 
TRUST & TRUST & TRUST & TRUST & 
CONFIDENCE CONFIDENCE CONFIDENCE | CONFIDENCE 

The NHS or your local GP 13% 60% 12% 65% 
The Police 17% 53% 18% 54% 
National Governmental 21% 49% 20% 51% 
departments/ organisations 
Financial services 27% 39% 22% 46% 
Local Government 27% 37% 24% 42% 
Online retailers 32% 29% 29% 33% 
Mobile, broadband, utility 39% 22% 33% 28% 
providers 
Social messaging platforms 62% 12% 60% 15% 


Base: All Adults: 2017 (2049) / 2018 (2131) 


e 18-34 year olds are significantly more likely to have a high level of trust and 
confidence in “financial services companies”, “online retailers”, “mobile, 
broadband and utility providers” and “social messaging providers” than 35+ year 
olds. 

e Males (18%) are more likely to have high trust and confidence in “social messaging 
providers" than females (1296). Similarly, 18-34 year olds (2896) were significantly 
more likely to have high trust and confidence in "social messaging providers" than 
35-54 year olds (1396) and 55+ year olds (7%). 
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Nearly one in five (18%) adults feel they have a good understanding of how their personal data is used 
by companies and organisations in the UK. This is notably up from the 10% who felt they had a good 
understanding in 2017. 


e The proportion of people who feel they know very little or nothing at all about how their 
personal data is used by companies and organisations has fallen from 39% in 2017 to 26% 
in 2018. 


Q3. Which of the following statements comes closest to your understanding of how your personal 
data is being used by companies and organisations in the UK? 


2017 | 2018 
| have a good understanding of how my personal 1096 1896 
data is used 
| am familiar with some aspects of how my personal 5296 5596 
data is used, but not all aspects 
| know very little about how my personal data is 3396 2296 
used 
| know nothing at all about how my personal data is 696 496 
used 


Base: All Adults: 2017 (2049) / 2018 (2131) 


e Males (23%) are significantly more likely to feel they have a good understanding 
of how their personal data is used than females (14%). 


e 55+ year olds (31%) are more likely to feel that they know very little or nothing at 
all about how their personal data is used than 18-34 year olds (2196) and 35-54 
year olds (27%). 


e Members of the public from England (25%) are least likely to feel that they know 
very little or nothing at all about how their personal data is used compared to 
those from Scotland (3396), Wales (3596) and Northern Ireland (3996). 
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There has also been an increase in the proportion of people with a good understanding of how 
their personal data is made available to third parties and the public by companies and 
organisations in the UK. 


e Around one in six (16%) adults feel they have a good understanding of how their personal 
data is made available to third parties and the public by companies and organisations in 
the UK. This is a marked increase from the 8% who felt they had a good understanding in 
2017. 


e Just over a third (35%) feel they know very little or nothing at all about how their personal 
data is made available by companies and organisations. This is notably down from the 
48% feeling this in 2017. 


Q4. Which of the following statements comes closest to your understanding about how your personal 
data is being made available to third parties and the public by companies and organisations in the 
UK? 


2017 2018 


| have a good understanding of how my personal data 8% 16% 
is made available 


| am familiar with some aspects of how my personal 44% 49% 
data is made available, but not all aspects 


| know very little about how my personal data is made 3996 2996 
available 
| know nothing at all about how my personal data is 996 696 


made available 


Base: All Adults: 2017 (2049) / 2018 (2131) 


e Males (19%) are more likely to feel they have a good understanding of how their 
personal data is made available than females (1396), whereas females are 
significantly more likely to feel that they know very little or nothing at all about 
how their personal data is made available than males (3996 vs 3196 respectively). 


e Respondents from Wales (2296) are more likely to feel they have a good 
understanding of how their personal data is made available than respondents 
from England (1696), Scotland (1396) and Northern Ireland (1196). 
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The proportion of people disagreeing with each of the statements has increased since 2017, which 
highlights that more can be done by businesses and organisations to facilitate the access to, the 
amendment of and use of personal data. 


e The proportion of people disagreeing that “it is easy to access and change my personal 
information held by businesses/organisations” has seen a 15% point increase since 2017. This 
highlights that, post GDPR, the public is more aware that they have more rights but is still 
unsure how to go about exercising them. 


e The public is more inclined to have a view this year, with levels of agreement and 
disagreement up on all other statements. 


e The proportion of people disagreeing that “current laws and regulations provide sufficient 
protection of personal information” has risen from 49% in 2017 to 57% in 2018. 


Q5. Do you agree or disagree with the following statements about the use of personal information in 
the UK? 


2017 2018 


NET | NET Don't NET NET Dont | 
| Agree Disagree know | Agree | Disagree | know | 
It is easy to access and change my 32% 44% 24% 29% 59% 12% 
personal information held by 


businesses/organisations 


Current laws and regulations provide 30% 49% 21% 33% 57% 10% 
sufficient protection of personal 

information 

Businesses/ organisations are open and 24% 61% 15% 26% 66% 8% 


transparent about how they collect and 
use personal information 


It is easy to find out how my personal 21% 57% 22% 23% 64% 13% 
information is stored and used by 
businesses/ organisations 


It is easy to find out whether my personal! 20% 5996 2196 2396 6396 14% 
information is being made available to 
third parties 


Base: All Adults: 2017 (2049) / 2018 (2131) 
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If an organisation that held personal data was either affected by a data breach or was sharing data 
with third parties, the public largely continues to feel that this would have a negative impact on their 
trust and confidence in the organisation. 


e The biggest change since 2017 is on ‘sharing my personal information to third parties with my 
permission’. While there been a slight increase in those saying it would have a positive impact 
on trust and confidence in the organisation (up from 14% to 23%), a larger increase is seen 
amongst those saying it would have a negative impact (up from 23% to 41%). This indicates 
that greater awareness around data protection has polarised people’s views. 


Q6. If an organisation that held your data was affected by any of the following, what impact would 
this have on your trust and confidence in this organisation? 


2017 2018 


Net No Net Net No | Net 
| Positive impact Negative Positive impact Negative 


The organisation was sharing my 14% 63% 23% 23% 36% 41% 
personal information to third parties 
with my permission 


The organisation was affected by adata| 13% 16% 71% 18% 18% 64% 
breach (unauthorised access to or loss 
of my personal data) and told me 


The organisation was affected by a data 7% 9% 84% 12% 11% 77% 
breach (unauthorised access to or loss 
of my personal data) and didn’t tell me 
The organisation was sharing my 6% 9% 85% 12% 11% 77% 


personal information to third parties 
without my permission 


Base: All Adults: 2017 (2049) / 2018 (2131) 


e 55+ year olds are notably more likely to feel that there would be a negative impact on their 
trust and confidence in the organisation, particularly if it was sharing information without 
their permission. 
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Around three in five (58%) of the public stated that they or a close friend/family member have heard 
about or actually experienced a data breach (i.e. personal information being shared without 
permission, used fraudulently or lost/stolen), a slight increase on the 54% stating this in 2017. 


e 23% of the public state that they have personally “heard of a news story about a data breach 
in a company/ organisation they have shared personal information with and were not 
personally notified”, and 17% have had this happen to a close friend/family member. Both of 
which are increases on the proportions stating this in 2017. 


e Furthermore, the proportion stating they or friends/family members have not experienced 
any of the data breaches has decreased from 46% in 2017 to 42% in 2018. 


Q7. Thinking about personal data you may hold with companies and organisations, have any of the 
following things happened to you or a close friend/family member? 


2017 2018 
Happened Happened Net Happened Happened Net 
to you toa you/ | to you toa you/ 
friend/ friend or | friend/ | friend 
family | family family or 
family 
Net: ANY 45% 38% 54% 51% 46% 58% 
Personal data has been shared with a 20% 11% 24% 19% 15% 26% 
third party without permission 
Had an online account(s) accessed or 17% 17% 29% 15% 16% 24% 
used fraudulently by someone else 
Heard a news story about a data 15% 11% 21% 23% 17% 29% 


breach in a company/ organisation 
that I/they have shared personal 
information with, but was not 
personally notified 


Been told by a company I/they hold an| 12% 10% 18% 15% 13% 22% 
laccount with or are employed by, that 
my/their personal details may have 
been lost or stolen 


Had personal details stolen and used 10% 17% 24% 12% 15% 21% 
ito commit fraud 
None of these 5596 6296 4696 4996 5496 4296 


Base: All Adults: 2017 (2049) / 2018 (2131) 
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Nearly four in five (78%) felt that if a company/organisation that they used was affected by a data 
breach and their information was lost or stolen, the company holding the data should be held 


responsible. 


Q8. If a company/organisation that you used was affected by a data breach and your information 
was lost or stolen, who do you think should be held responsible? 


% 
The company/ organisation who was holding your data 78% 
A regulatory body 15% 
The Government 11% 
Yourself 11% 
Other 4% 
None 6% 
Don’t Know 1% 
Base: All Adults: 2018 (2131) 


55+ year olds (90%) are significantly more likely to state that the company/organisation 
holding their data should be held responsible than 35-54 year olds (75%) and 18-34 year olds 


(65%). 
o 18-34 year olds (21%) were notably more likely to state that if they were affected by 


a data breach, a regulatory body/ Government should be held responsible than 35-54 
year olds (14%) and 55+ year olds (11%). 
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As seen in 2017, people are most likely to state that ‘banning companies/ organisations from sharing 
personal information with third parties without permission’ would increase their trust and confidence 
in how their personal data is used and made available. This was ranked first of six options by 26% and 
in the top three by 65%. 


e However, the proportion stating this has fallen since 2017, and is now at similar levels to 
‘making it a legal requirement for companies/organisations to tell customers that they have 
been affected by a data breach’ (23% first choice, 65% top 3) 


Q9. Which of the following, if any, would increase your trust and confidence in how your personal 
data is used and made available by companies and organisations? 


2017 2018 
NET: qc NET: 


D$ | 
Topà Choice Top3 


Choice 


Banning companies/ organisations from sharing personal 35% 74% 26% 65% 
information with third parties without permission 


Making it a legal requirement for companies/ organisations to | 20% 66% 23% 65% 
itell customers that they have been affected by a data breach 


Fining companies and organisations if they are found to use 1396 5996 1596 5896 
personal information without permission 


Custodial sentences (i.e. prison) for those responsible for the 16% 43% 15% 47% 
most severe breaches in the use of personal information 


Making it easier to see and change any consent | have given 10% 40% 14% 44% 
regarding the use of my personal information 
None of the above 5% 5% 7% 7% 


Base: All Adults: 2017 (2049) / 2018 (2131) 


There has been a slight increase in the extent to which the public trusts businesses with their personal 
information (25%, compared to 22% in 2017). 


Q10. To what extent do you trust businesses with your personal information? 


2017 2018 
NET: Trust 22% 25% 
Trust completely 2% 3% 
Trust a little 20% 22% 
Neither trust nor distrust 29% 30% 
Distrust a little 36% 36% 
Distrust completely 13% 9% 
NET: Distrust 49% 45% 


Base: All Adults: 2017 (2049) / 2018 (2131) 


e 18-34 year olds (34%) are significantly more likely to state that they trust businesses with their 
personal information than 35-54 year olds (24%) and 55+ year olds (21%). 
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E.2 GDPR 


Three quarters (75%) of the public agree that it is important that their personal information is 
protected when they share it with businesses. 


Q11. How much do you agree or disagree that “it is important that my personal information is 
protected when | share it with businesses”? 


22% 


Total Male Female 18-34 35-54 
BNET Disagree mNeither mNet Agree 


Base: All Adults: Total (2131), Males (1013), Females (1118), 18-34 (637), 35-54 (726), 55+ (768) 


e 18-34 year olds (63%) are less likely to agree that it is important that their personal 
information is protected when they share it with businesses than 35-54 year olds (72%) and 
55+ year olds (86%). 
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The public’s awareness varies in terms of the data protection rights they have varies with regards to 
personal details held on them by companies and organisations in the UK. 


e The right that most are aware of is the ‘right to access your personal data’ (58%), followed by 
the ‘right to be informed about the collection and use of your personal data’ (52%) and the 
‘right to have inaccurate personal data rectified, or completed if it is incomplete’ (45%). 


e The rights least known were the ‘right to move data from one provider to another’ (27%), and 
the ‘right not to be subject of automated decision making and profiling’ (30%). 


Q12. What rights under law do you think you have with regards to personal details held about you 
by companies and organisations in the UK? 


Total 96 18-34 96 35-54 96 554 96 


|The right to access your personal 


5896 4896 6196 64% 
data 


The right to be informed about 
the collection and use of your 52% 44% 52% 59% 
personal data 


The right to have inaccurate 
personal data rectified, or 45% 35% 43% 55% 
completed if it is incomplete 


The right to be forgotten / to 


o, o, o, o, 
have personal data erased is ane is Te 
The right to object to personal 43% 35% 46% 47% 
data being processed 
The right to restrict the 39% 30% 41% 43% 
processing of their personal data 
The right not to be subject of 
automated decision making and 30% 28% 31% 31% 
profiling 
The right to move data from one 27% 27% 28% 27% 
provider to another 
None of the above - individuals 3% 2% 2% 4% 


have no rights under law 


Don’t Know 13% 12% 12% 15% 
Base: All Adults: Total (2131), 18-34 (637), 35-54 (726), 55+ (768) 


e Awareness of the rights largely increases with age, with 55+ year olds being most aware. 
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The most common way that the public would look to get advice and/or information on protecting 
their personal data is via the Citizens Advice Bureau, mentioned by over two in five (41%), slightly 
down on the number saying this in 2017 (44%). 


There has been a significant increase in the proportion stating they would get advice and/or 
information from the ICO (33%), a 17% point increase from 2016. 


The proportion who would use a search engine to get advice and/or information on protecting 
their personal data in 2018 (35%) has significantly decreased since 2016. It appears that, with 
greater specific awareness, the public feels more able to turn to official bodies (‘Local MP’ has 
also seen a slight rise). 


There remains around one in six (16%) who are unsure as to where they would get advice 
and/or information. 


Q13. Where would you go to get advice and/or information on protecting your personal data? 


" 44% 
Citizens Advice Bureau EET". 
49% 


: Par ; ; 16% 
Information Commissioner's Office BEEN eee 33% 


Wikipedia 


| wouldn't look for advice 


Your local MP BEL 
496 
396 


Other 176 


f 15% 


0% 10% 20% 30% 40% 50% 60% 
E 2016 Annual Tracker m 2018 

Base: All Adults: 2016 (1249) / 2018 (2131) 
Females (18%) are more likely to be unsure as to where to get advice and/or information on 
protecting their personal data than males (13%). 
55+ year olds (40%) are more likely to look to get advice and/or information on protecting 
their personal data from the Information Commissioner’s Office than 18-34 year olds (23%) 
and 35-54 year olds (33%). 
18-34 year olds (27%) are more likely to use “friends and family” to get advice and/or 
information than 35-54 year olds (15%) and 55+ year olds (9%). 
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84% have heard of the GDPR, although 29% have “heard about it, but do not know anything about it”. 
This compares to 97% awareness of the Data Protection Act in 2016, highlighting that there is more 
work to do to further increase awareness. 


e Females (18%) are more likely to state that they haven’t heard about GDPR than males (14%). 


Q14. Have you ever heard of the General Data Protection Regulation (GDPR)? 


219 
55+ 


Total 18-34 35-54 
E No | haven't heard of it E Yes, but | don't know anything about it B Yes, | know about it 


Base: All Adults: Total (2131), 18-34 (637), 35-54 (726), 55+ (768) 


e Respondents from Scotland and Northern Ireland (both 22%) are more likely to have not heard 
about GDPR than members of the public from England (1596) and Wales (16%). 
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E.3 Technology 


Nearly two in five (39%) of the public agree that companies and organisations protect their personal 
information from the risks arising from technology, whereas one in three (32%) disagree. 


Q15. To what extent do you agree or disagree that companies and organisations protect your 
personal information from the risks arising from technology? 


55+ 


Total 18-34 35-54 
m NET Disagree Neither MNET Agree 


Base: All Adults: Total (2131), 18-34 (637), 35-54 (726), 55+ (768) 


e Respondents in Scotland (35%) are slightly more likely to disagree that companies and 
organisations protect their personal information from the risks arising from technology than 
those in England (32%), Wales (31%) and Northern Ireland (33%). 
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‘Personal information being stolen by criminals’ is a concern for nearly three quarters (74%) of the 
public when companies and organisations use their personal information. 


e A further half are concerned about ‘personal information being used in an automated way to 
make decisions about me’ (51%) and ‘online activity being tracked’ (53%). 


e Just 7% are not concerned about any of these outcomes. 


Q16. Which of the following outcomes are you most concerned about when companies and 
organisations use your personal information? 


Personal information being 
stolen by criminals 


My online activity being 


tracked 5596 5396 
Personal information being 

used in an automated way to 5296 5496 
make decisions about me 

None of these 8% 3% 


Base: All Adults: Total (2131), 18-34 (637), 35-54 (726), 55+ (768) 


e 55+ year olds are significantly more worried about their ‘personal information being stolen by 
criminals’ (85%) than 18-34 year olds (60%) and 35-54 year olds (73%). 


e Females (77%) are more worried about their ‘personal information being stolen by criminals’ 
than males (71%). 


e Males are more worried about ‘their online activity being tracked’ (55%) and ‘personal 
information being used in an automated way to make decisions about them’ (54%) than 
females (50% and 49% respectively). 
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E.4 Freedom of Information (FOI) 


Compared with 2016, there is a decrease in the awareness of rights that the public feels it has to access 
information held by the government, public authorities and/or publicly owned companies in the UK. 


e The biggest shift in awareness is seen on the “right to see what public money is being spent 


on" (2016 55926 and 2018 4096) 


e The proportion stating they do not know what rights they have has risen from 16% in 2016 to 
2496. 


Q17. What rights under law do you think you have to access information held by the government, 
public authorities and/or publicly owned companies in the UK? 


The right to request information held by public 5396 
organisations 49% 


The right to know what type of information is 47% 
available from public organisations 43% 


55% 


The right to see what public money is being spent on 40% 
o 


The right to see official information from public 
organisations such as minutes and planning 
documents 


38% 
36% 


The right to request information about the 
environment 33% 


40% 


Don't know 16% 


24% 


3% 


The public don't have any rights 3% 


0% 10% 20% 30% 40% 50% 60% 
m 2016 FOIA Study m2018 


Base: All Adults: 2016 FOIA Study (1251) / 2018 (2131) 


e Males (53%) are significantly more likely to be aware of ‘the right to request information held 
by public organisations’ than females (46%). 

e 55+ year olds (57%) are significantly more likely to be aware of ‘the right to request 
information held by public organisations’ than 18-34 year olds (41%) and 35-54 year olds 
(48%). 
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The level of agreement that information the public wants about the government, public authorities 
and or publicly owned companies is available and accessible has remained constant with 2016 (39% 


vs 38% respectively). 


Q18. Do you agree or disagree that information you want about the government, public authorities 
and or publicly owned companies is available and accessible? 


2016 2018 


NET: Agree 38% 39% 
Strongly agree 12% 9% 

[Tend to agree 26% 31% 
Neither agree nor disagree 31% 31% 
Tend to disagree 2396 2596 
Strongly disagree 796 596 

NET: Disagree 3096 3096 


Base: All Adults: 2016 FOIA Study (1251) / 2018 (2131) 


e Male respondents are significantly more likely to agree (4496) that information they want 
about the government, public authorities and or publicly owned companies is available and 
accessible than females (3596). 
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